$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/OASoP45-VUgwsloNkR_W_hCa8hM.roa File: OASoP45-VUgwsloNkR_W_hCa8hM.roa (raw, json) Hash identifier: DsnomAW9SwtVg78Mk48kLElRNT4VaSKzTsqQP5j7sf0= Subject key identifier: 38:04:A8:3F:8E:7E:55:48:30:B2:5A:0D:91:1F:D6:FE:10:9A:F2:13 Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Certificate serial: 39 Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/OASoP45-VUgwsloNkR_W_hCa8hM.roa Signing time: Sat 01 Mar 2025 01:29:03 +0000 ROA not before: Sat 01 Mar 2025 01:29:03 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 131954 IP address blocks: 121.58.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Validity Not Before: Mar 1 01:29:03 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=3804A83F8E7E554830B25A0D911FD6FE109AF213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fa:51:a1:c9:23:38:d0:85:1c:eb:02:12:6e: 9e:57:0e:eb:83:44:fa:0f:d4:75:dd:0f:d8:1d:7a: 1b:3d:56:b0:92:66:5a:0d:3c:df:93:90:1b:2a:00: db:96:92:7f:ab:01:8d:20:8f:e5:10:43:0c:32:bb: 50:e5:ae:43:8f:48:df:42:96:a1:22:65:40:8b:9a: eb:5d:2e:f6:f1:e5:dc:0a:01:ab:9b:bf:68:9b:88: 4a:2a:e9:1e:87:e9:e4:bb:8d:65:11:8d:2d:ce:9c: 06:f2:16:9a:89:b0:0e:a4:36:95:fb:23:05:9d:54: fe:d8:2e:f9:17:a4:02:97:f5:15:06:1d:05:22:88: 30:70:4f:b4:68:40:5c:0e:73:7d:a6:d2:f5:e5:8b: 72:3e:87:2c:57:7e:fc:26:f0:40:c2:e0:ee:39:85: 1e:7a:58:ff:c5:6f:31:fd:be:a8:f7:92:a1:f7:5d: fb:a9:95:71:05:23:66:86:43:a4:a1:3c:4b:1d:02: ed:01:2d:53:9e:23:31:41:29:7e:a0:9f:6a:3e:12: c9:90:a4:15:62:75:95:3f:9f:aa:76:d2:cc:85:78: 34:7b:97:75:e3:ea:10:dd:d9:c7:38:55:34:e1:9a: 1f:b3:85:71:aa:04:90:4a:98:da:c2:af:cf:72:3e: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:A8:3F:8E:7E:55:48:30:B2:5A:0D:91:1F:D6:FE:10:9A:F2:13 X509v3 Authority Key Identifier: keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/OASoP45-VUgwsloNkR_W_hCa8hM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.58.128.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:e8:59:eb:06:45:29:96:8b:c0:09:dd:5d:9e:c8:34:31:c2: 80:29:f2:8d:b7:ed:7c:ad:3b:b3:3d:e0:ee:87:6b:b0:a8:9d: cc:15:7b:5e:50:13:e0:e1:c1:53:c9:9b:bc:25:fc:35:a9:6b: ad:a9:37:2f:c3:85:9e:b0:fc:ce:24:cc:85:5e:2b:d5:76:c3: bf:12:c1:49:15:48:6c:60:dc:cf:f0:ec:f4:aa:3f:95:44:33: e5:b4:30:af:b8:3b:0b:2c:b6:c7:4c:2e:6a:91:19:27:f4:5d: f3:ab:b6:f5:86:5f:bb:51:83:4e:64:f3:83:1c:31:96:24:c2: 5a:9d:05:64:ac:c9:1a:0c:fc:73:6d:9f:fb:4c:59:22:47:e1: 8b:e1:5d:6a:04:d9:92:1f:bd:dc:53:79:c9:e4:c4:28:dc:e9: ff:4c:5c:02:62:e4:56:34:6f:49:f1:d2:36:76:a9:8e:fc:18: 2f:66:46:29:f8:dd:98:7b:60:81:b0:c0:ae:3b:cf:4b:80:89: 1a:6a:cf:c7:8f:ee:a2:7d:c4:71:c2:64:df:3e:5d:3c:fb:ad: cd:20:d0:35:cb:43:d2:a5:cd:25:82:5a:f9:8e:49:8a:b7:b0: 34:8c:b1:66:93:d3:42:04:18:53:79:58:11:c8:e9:85:d5:8c: d1:2e:7f:83 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4 REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI1MDMwMTAx MjkwM1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMzgwNEE4M0Y4RTdFNTU0 ODMwQjI1QTBEOTExRkQ2RkUxMDlBRjIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOX6UaHJIzjQhRzrAhJunlcO64NE+g/Udd0P2B16Gz1WsJJmWg08 35OQGyoA25aSf6sBjSCP5RBDDDK7UOWuQ49I30KWoSJlQIua610u9vHl3AoBq5u/ aJuISirpHofp5LuNZRGNLc6cBvIWmomwDqQ2lfsjBZ1U/tgu+RekApf1FQYdBSKI MHBPtGhAXA5zfabS9eWLcj6HLFd+/CbwQMLg7jmFHnpY/8VvMf2+qPeSofdd+6mV cQUjZoZDpKE8Sx0C7QEtU54jMUEpfqCfaj4SyZCkFWJ1lT+fqnbSzIV4NHuXdePq EN3ZxzhVNOGaH7OFcaoEkEqY2sKvz3I+jw8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ4BKg/jn5VSDCyWg2RH9b+EJryEzAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/ Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NTQvT0FTb1A0NS1WVWd3c2xvTmtSX1dfaENhOGhNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3k6gDANBgkqhkiG9w0BAQsFAAOCAQEAXuhZ6wZFKZaLwAndXZ7INDHCgCny jbftfK07sz3g7odrsKidzBV7XlAT4OHBU8mbvCX8Nalrrak3L8OFnrD8ziTMhV4r 1XbDvxLBSRVIbGDcz/Ds9Ko/lUQz5bQwr7g7Cyy2x0wuapEZJ/Rd86u29YZfu1GD TmTzgxwxliTCWp0FZKzJGgz8c22f+0xZIkfhi+FdagTZkh+93FN5yeTEKNzp/0xc AmLkVjRvSfHSNnapjvwYL2ZGKfjdmHtggbDArjvPS4CJGmrPx4/uon3EccJk3z5d PPutzSDQNctD0qXNJYJa+Y5JirewNIyxZpPTQgQYU3lYEcjphdWM0S5/gw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:14 2025 by rpki-client